Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e/bf04624b-2810-314d-8509-0a4c13e7ef1c.roa
File:                     bf04624b-2810-314d-8509-0a4c13e7ef1c.roa (raw, json)
Hash identifier:          DHCboTmiKfTTqPsKHlfUKGQQ6uXdq174BxP9Z2awSTI=
Subject key identifier:   41:36:C4:E6:16:EC:E1:99:38:70:B3:25:2F:F5:0B:9F:F4:2A:6E:3C
Certificate issuer:       /CN=c2e53398-d877-4381-8fdb-2ec7db53fc5e
Certificate serial:       010D0C9F4328584598FDFF49DF3491D2B209AD80
Authority key identifier: 2B:E1:B8:FE:4E:74:DB:27:4B:8E:5F:CE:9D:30:66:E7:DA:0D:EA:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e/bf04624b-2810-314d-8509-0a4c13e7ef1c.roa
Signing time:             Fri 19 Apr 2024 13:00:36 +0000
ROA not before:           Fri 19 Apr 2024 13:00:36 +0000
ROA not after:            Thu 18 Jul 2024 13:00:36 +0000
asID:                     16801
IP address blocks:        151.179.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e/c2e53398-d877-4381-8fdb-2ec7db53fc5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e/c2e53398-d877-4381-8fdb-2ec7db53fc5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:98:fd:ff:49:df:34:91:d2:b2:09:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2e53398-d877-4381-8fdb-2ec7db53fc5e
        Validity
            Not Before: Apr 19 13:00:36 2024 GMT
            Not After : Jul 18 13:00:36 2024 GMT
        Subject: CN=4631309d-400d-4710-86aa-48b9f43dd4be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:27:dc:b0:58:c3:fe:bb:5d:76:6c:1e:5b:ff:
                    9f:02:c9:90:5b:ff:f5:6c:3c:6f:07:ee:19:16:b1:
                    a5:6b:57:47:4b:eb:90:63:a1:c0:84:2c:7b:ef:35:
                    4c:f3:e7:d3:61:54:1e:32:f6:84:a1:d6:91:a3:c6:
                    18:c6:40:74:02:30:7f:92:35:ee:53:0d:5b:f2:0e:
                    09:62:c0:7d:49:c7:26:09:23:d6:16:94:21:9e:66:
                    e3:57:e5:5c:8d:15:c1:29:70:1e:b5:f6:9d:30:ae:
                    1d:34:c3:67:2c:91:06:b2:51:a0:35:46:ff:28:a9:
                    52:34:68:1a:54:b1:e9:6b:27:83:42:7e:a2:fd:a8:
                    33:33:ca:fe:50:aa:8c:23:fd:a9:c5:ee:fb:66:7a:
                    d5:35:56:56:4a:18:6b:9b:90:50:a1:a0:8b:b5:dc:
                    69:78:c1:73:f6:6a:cc:6c:26:09:05:34:eb:0a:d8:
                    84:7f:e1:13:33:eb:70:fa:93:33:82:5c:fb:13:d6:
                    51:8f:04:27:7e:fa:a7:f4:e1:a2:b9:95:cc:2d:9c:
                    34:55:cd:25:3c:c8:f6:5b:78:2d:db:37:f1:1f:87:
                    83:61:41:78:2b:8d:8d:6e:3e:2e:3c:c0:30:72:24:
                    1d:b8:c4:c8:7f:6e:84:15:73:7c:99:38:3a:84:cd:
                    7a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:36:C4:E6:16:EC:E1:99:38:70:B3:25:2F:F5:0B:9F:F4:2A:6E:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e/bf04624b-2810-314d-8509-0a4c13e7ef1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e/c2e53398-d877-4381-8fdb-2ec7db53fc5e.crl

            X509v3 Authority Key Identifier:
                keyid:2B:E1:B8:FE:4E:74:DB:27:4B:8E:5F:CE:9D:30:66:E7:DA:0D:EA:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.179.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:d0:ba:7b:7f:68:45:63:4b:51:85:a2:7b:ca:43:17:11:53:
         ad:49:da:fe:68:e4:32:cc:c6:a0:b0:a6:2a:e2:34:d5:4c:67:
         5e:dd:c6:fa:35:17:1e:ec:79:66:05:f8:60:bc:e4:3f:74:87:
         07:b2:f1:90:9e:a2:c9:4c:d7:73:83:e7:dc:0c:e2:04:85:58:
         2f:b7:fa:05:8a:02:3a:f9:93:a2:41:2e:8b:a0:95:b5:d2:ee:
         35:ac:4d:2b:4e:07:fe:6a:49:df:f3:7e:8a:c8:a4:28:9c:11:
         34:83:48:37:4a:b0:3f:52:e4:6b:0a:86:52:4a:b8:15:28:d0:
         e4:7d:5c:43:69:1e:2f:d8:9d:03:41:3b:4c:6f:5b:50:0f:12:
         54:26:31:d7:59:fc:29:a3:3e:06:35:62:04:e3:31:e4:fc:0b:
         8b:db:3f:38:be:e0:2b:58:aa:d3:28:d9:bc:00:7f:a1:f2:d1:
         b0:f6:97:fe:50:3a:5c:91:c1:4c:2a:15:35:d4:64:99:f9:a0:
         bb:ad:2c:fe:3f:74:ec:50:8c:20:14:81:b4:18:21:6c:74:f4:
         ce:8e:4b:ed:81:1c:74:e6:c9:ab:ab:0f:5b:02:aa:37:e0:df:
         8c:5e:ba:48:00:c1:8b:05:50:2a:5b:96:72:3f:ad:5f:c1:a7:
         a5:8e:e2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:03:00 2024 by rpki-client on console-ams.rpki-client.org